Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This issue has been patched in versions 4.9.0 and 5.4.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-09 | 2 | Disclosure1Patch1 |
| 2026-05-11 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-42069 📊 Severity: 7.1 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-42069 #CVE-2026-42069 #CVE #High #CyberSecurity #InfoSec https://t.co/AOFLIG0Fay
Post summary
The tweet announces a new CVE-2026-42069 with a severity rating of 7.1 but offers no technical, exploit, or remediation details.
CVE-2026-42069 Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This… https://www.cve.org/CVERecord?id=CVE-2026-42069
Post summary
CVE-2026-42069 affects Kirby CMS where prior to versions 4.9.0 and 5.4.0, user and role data is publicly readable; upgrading to those versions is the recommended remediation.
CVE-2026-42069 Unauthorized Information Disclosure in Kirby CMS Prior to Versions 4.9.0 and 5.4.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42069
Post summary
The text announces CVE‑2026‑42069 as an unauthorized information disclosure affecting Kirby CMS versions 4.9.0 and 5.4.0, but provides no PoC, exploit, mitigation, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | getkirby | kirby | - | - | - |